Home / Companies / Socket / Blog

Socket Blog

785 posts indexed since 2022

Blog URL
Posts YTD
282 ↑ vs 227 last year
Avg Posts/Month
13.1 since 2022
Monthly Post Volume
Monthly post counts
MonthPosts
1-20220
2-20220
3-20222
4-20220
5-20221
6-20221
7-20221
8-20221
9-20221
10-20221
11-20222
12-20222
1-20233
2-20234
3-20236
4-20237
5-20234
6-20232
7-20233
8-20238
9-20230
10-20232
11-20235
12-202314
1-202416
2-202420
3-202410
4-202413
5-202410
6-202413
7-202416
8-202415
9-202419
10-202424
11-202415
12-202414
1-202518
2-202516
3-202519
4-202527
5-202523
6-202520
7-202523
8-202522
9-202518
10-202524
11-202517
12-202521
1-202635
2-202633
3-202643
4-202632
5-202627
6-202627
7-202623
8-202622
9-202615
10-202624
11-20261
Post Details

785 matching posts

Title Author Published Words HN Pts
Trivy Supply Chain Attack Expands to Compromised Docker Images Philipp Burckhardt 2026-03-22 366 5
TypeScript 6.0 Released: The Final JavaScript-Based Version Sarah Gooding 2026-03-23 637 --
GitHub Activates Push Protection by Default After Detecting ... Sarah Gooding 2026-03-24 668 2
Tech's $90B Ghost Engineer Problem: Stanford Study Finds 9.5... Sarah Gooding 2026-03-24 772 4
The Cyber Security Council Podcast: Securing Modern Applicat... Sarah Gooding 2026-03-24 408 2
Maven Central Adds Sigstore Signature Validation Sarah Gooding 2026-03-24 715 3
Opengrep Launches Playground in Alpha: A Faster, More Stable... Sarah Gooding 2026-03-24 1,040 2
Michigan TypeScript Founder Successfully Runs Doom Inside Ty... Sarah Gooding 2026-03-24 879 2
5 Malicious npm Packages Typosquat Solana and Ethereum Libraries to Steal Private Keys Kush Pandya 2026-03-24 1,691 --
TeamPCP Is Systematically Targeting Security Tools Across the OSS Ecosystem Sarah Gooding 2026-03-24 886 5
Widespread GitHub Campaign Uses Fake VS Code Security Alerts to Deliver Malware Sarah Gooding and Peter van der Zee 2026-03-25 1,127 --
TeamPCP Partners With Ransomware Group Vect to Target Open Source Supply Chains Sarah Gooding 2026-03-26 757 --
TeamPCP Compromises Telnyx Python SDK to Deliver Credential-Stealing Malware Socket Research Team 2026-03-27 3,756 --
Supply Chain Attack on Axios Pulls Malicious Dependency from npm -- 2026-03-31 1,986 2
The Hidden Blast Radius of the Axios Compromise -- 2026-04-01 3,065 6
Fluent Assertions Faces Backlash After Abandoning Open Sourc... Sarah Gooding 2026-04-02 1,082 3
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise -- 2026-04-02 857 5
Node.js Drops Bug Bounty Rewards After Funding Dries Up -- 2026-04-02 902 --
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign -- 2026-04-03 1,806 3
uv: Python's New High-Speed Package Manager Promises to Simp... Sarah Gooding 2026-04-07 1,128 5
Microsoft Releases Open Source Toolkit for AI Agent Runtime Security -- 2026-04-07 1,074 --
North Korea’s Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads -- 2026-04-07 2,680 2
Feross on TBPN: How North Korea Hijacked Axios -- 2026-04-08 254 --
Attackers Are Impersonating a Linux Foundation Leader in Slack to Target Open Source Developers -- 2026-04-08 972 --
Don't Kill the Goose That Lays the Golden Eggs Sarah Gooding 2026-04-10 528 --
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation Sarah Gooding 2026-04-11 605 3
108 Chrome Extensions Linked to Data Exfiltration and Session Theft via Shared C2 Infrastructure Kush Pandya 2026-04-13 3,881 6
Feross on the 10 Minutes or Less Podcast: Nobody Reads the Code Sarah Gooding 2026-04-14 186 --
Socket Selected for OpenAI's Cybersecurity Grant Program Sarah Gooding 2026-04-16 467 --
Socket Named Top Sales Organization by RepVue Sarah Gooding 2026-04-17 366 --
NIST Officially Stops Enriching Most CVEs as Vulnerability Volume Skyrockets Sarah Gooding 2026-04-17 1,465 --
Socket for Jira Is Now Available Jeppe Hasseriis 2026-04-20 602 --
Introducing Reports: An Extensible Reporting Framework for Socket Data André Staltz 2026-04-21 886 --
Introducing Organization Notifications in Socket Alex Morais 2026-04-22 564 --
Malicious Checkmarx Artifacts Found in Official KICS Docker Repository and Code Extensions Socket Research Team 2026-04-22 2,911 4
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware Socket Research Team 2026-04-22 1,195 1
Introducing Data Exports Ola Adekola 2026-04-23 692 1
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign Socket Research Team 2026-04-23 884 872
Introducing Reachability for PHP Benjamin Barslev 2026-04-24 1,984 --
73 Open VSX Sleeper Extensions Linked to GlassWorm Show New Malware Activations Socket Research Team 2026-04-25 980 1
Socket Has Acquired Secure Annex Feross Aboukhadijeh 2026-04-28 389 3
TeamPCP-Linked Supply Chain Attack Hits SAP CAP and Cloud MTA npm Packages Socket Research Team 2026-04-29 1,711 2
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables Socket Research Team 2026-04-29 914 --
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack Socket Research Team 2026-04-30 914 --
lightning PyPI Package Compromised in Supply Chain Attack Socket Research Team 2026-04-30 2,659 --
Mini Shai-Hulud Spreads to Packagist: Malicious Intercom PHP Package Follows npm Compromise Socket Research Team 2026-04-30 1,340 --
PyPI Fixes High-Severity Access Control Issues Found in Security Audit Sarah Gooding 2026-05-01 1,409 1
Malicious Ruby Gems and Go Modules Impersonate Developer Tools to Steal Secrets and Poison CI Kirill Boychenko 2026-05-01 2,574 4
pnpm 11 Adds Supply Chain Protection Defaults for Minimum Release Age and Exotic Subdependencies Sarah Gooding 2026-05-04 924 --
5 Malicious NuGet Packages Impersonate Chinese UI Libraries to Distribute Crypto Wallet and Credential Stealer Kush Pandya 2026-05-06 2,840 --
Plushcap, by Matt Makai. 2021-2026.